v1.0.0

Stable Release

First stable release of the Artifact Keeper CLI. The CLI is feature-complete with 29 top-level commands, 100+ subcommands, interactive TUI, multi-instance management, and multi-platform distribution.

Security

• Bumped SonarSource/sonarqube-scan-action from v5 to v6 to fix argument injection vulnerability
• Updated lru transitive dependency to 0.16.3 to resolve IterMut unsoundness
• Added explicit permissions blocks to all CI workflow jobs (least-privilege)
• Added CodeQL workflow with exclusions for generated SDK code
• Removed URL paths from test helper error messages

Changed

• Bumped MSRV from 1.85.0 to 1.86.0
• Bumped ratatui from 0.29 to 0.30, crossterm from 0.28 to 0.29

v0.9.0 (included)

• Snapshot tests using insta for JSON and table output regression detection across all command modules (~40 snapshot tests)
• E2E integration test suite running against a real backend via Docker Compose (20+ test files covering auth, repo, admin, governance, analytics, webhook, and more)
• Docker Compose stack with backend, PostgreSQL, and Meilisearch for local E2E development
• CI pipeline job for automated E2E testing on push to main and PRs
• Removed plain-text password from TOTP command examples in CLI help text

Full Changelog: https://github.com/artifact-keeper/artifact-keeper-cli/blob/main/CHANGELOG.md

What's Changed

• Add SonarCloud scanning to CI by @brandonrc in #52
• Add v0.5 governance commands by @brandonrc in #53
• Add v0.6 Security & Signing commands by @brandonrc in #54
• feat: add v0.7 Federation & Replication commands by @brandonrc in #55
• Add v0.8 Admin & Analytics commands by @brandonrc in #56
• feat: v0.9 Testing Infrastructure by @brandonrc in #58
• Release v1.0.0: Stable CLI with security hardening by @brandonrc in #59

Full Changelog: v0.4.3...v1.0.0